Fixed a cache archive symlink restore issue and prevented git argument injection in SCM refs. Removed the web UI mode.
Fixed stdin handling for persistent tasks and PTY tasks on Windows, and added JIT task input hashing for improved cache efficiency. Also fixed peer dependency handling in package graphs, pnpm override-resolved dependency preservation, P-521 ECDSA certificate chain support, and npm command shim bypass on Windows.
Fixed a PTY shutdown hang that could cause processes to hang, and fixed nested Bun dependency versions not being preserved. Also fixed the --no-git flag incorrectly deleting existing .git directories, and improved npm tlog publish retry logic.
Fixed multiple symlink race conditions during cache restore and archive reads, and prevented Windows process drain hangs. Also fixed prune package.json workspaces, Bun alias child package preservation, non-UTF-8 path handling, and removed widespread panic callsites across the codebase for improved stability.
Fixed a high-severity command injection vulnerability in the Turborepo VSCode Extension and a login callback CSRF/session fixation vulnerability. Also patched unexpected local code execution during Yarn Berry detection.
Fixed LSP diagnostics to allow transit nodes.
stdin from be...